CVE-2026-132837.5HighCWE-416

CVE-2026-13283: Google Chrome vulnerability

Google · Chrome

Vendor fix available · Affected: Google Chrome · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.3%probability of exploitation in the next 30 days

27th percentile

050100

Higher than 27% of scored CVEs

7.5HighCVSS

LowMediumHighCrit.

DescriptionNVD

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Use After Free · Memory Corruption
Vendor: Google
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 26 Jun.

26 Jun 03:30
Chrome patches three high severity flaws, urges swift update
SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.